Resources
Cybersecurity white papers, data sheets, webinars, videos and more
Resource Library
Research
The State of South Korea’s Cyber Supply Chain Risk
New research reveals how third- and fourth-party exposure is shaping cybersecurity risk across South Korea’s largest enterprises.
South Korea is one of the most digitally connected economies in the world, with global leaders across automotive, electronics, finance, and shipping. But this high level of digital interdependence also creates significant cybersecurity exposure—particularly through complex third- and fourth-party vendor ecosystems.
In this report, SecurityScorecard analyzes the cybersecurity posture of South Korea’s largest enterprises, uncovering how systemic supply chain risk is shaping the country’s cyber threat landscape.
Using SecurityScorecard’s global security ratings and breach intelligence data, the research highlights how vendor concentration, shared technologies, and interconnected supplier networks can create cascading cyber risk across entire industries.
Download the report to explore the key findings and learn how organizations can strengthen resilience across their extended digital supply chains.
Press
SecurityScorecard Expands Global Presence in South Korea
SEOUL, March 11, 2026 – SecurityScorecard, the global leader in threat-informed third-party risk management (TPRM), today announced it is expanding its operations into South Korea and outlined plans to expand its market strategy and customer support across the South Korean market. The move reflects the increasing importance of supply… Read More
Blog
What the Mississippi Ransomware Attack Means for Healthcare and How to Protect Critical Infrastructure
A ransomware attack shut down clinics across Mississippi. Learn how healthcare and critical infrastructure can prevent supply chain-driven cyber disruptions.
Case Studies
Insurance Authority of Hong Kong
How the Insurance Authority of Hong Kong Strengthened Cyber Visibility and Risk Posture with SecurityScorecard
Press
SecurityScorecard Adds Former Maryland Gov. Larry Hogan to Advisory Board
SecurityScorecard, the global leader in threat-informed third-party risk management (TPRM), today announced that Former Maryland Governor Larry Hogan has joined the company’s Advisory Board.
Blog
What Are the Real Security Risks of Agentic AI and OpenClaw?
SecurityScorecard’s STRIKE Threat Intelligence team examines exposed OpenClaw deployments and the broader security risks of agentic AI, including remote code execution vulnerabilities, prompt injection, and the security controls organizations must implement now.
Blog
What is a CVE and Why is It Important?
What is a CVE? This guide explains how security teams use Common Vulnerabilities and Exposures to identify, track, and prioritize the threats that matter most.
Blog
How Exposed OpenClaw Deployments Turn Agentic AI Into an Attack Surface
SecurityScorecard’s STRIKE Threat Intelligence team details new research on exposed OpenClaw agentic AI deployments, explaining how attackers can abuse them for remote code execution and infrastructure misuse. STRIKE also shared steps organizations can take to reduce exposure.
Press
SecurityScorecard Reports Triple-Digit 2025 Partner Growth as MAX Ecosystem Expands Worldwide
Channel ARR and partner-led pipeline surged in 2025 as service providers rapidly adopted MAX to deliver managed threat-informed TPRM for global supply chain resilience\r\n
Blog
Recent Data Breach Examples
Discover how real data breach examples expose third-party risks. Learn from MOVEit, healthcare breaches, and M365 attacks to protect your business.
Blog
Strengthening National Cyber Resilience: Reflections from My Fireside Chat with ONCD Director Sean Cairncross
Mike Centrella, SecurityScorecard Head of Public Policy, shares insights from his fireside chat with the National Cyber Director Sean Cairncross on strengthening U.S. cyber resilience, deterrence, AI security, and workforce strategy.
Blog
Beyond the Hype: Moltbot’s Real Risk Is Exposed Infrastructure, Not AI Superintelligence
While the world debates Moltbook’s role in the AI ecosystem, it is just the tip of the iceberg of Titanic risk. SecurityScorecard’s STRIKE team uncovered what lurks beneath: Thousands of exposed OpenClaw (Moltbot) control panels vulnerable to takeover through misconfigured access and known exploits.
STRIKE Team
Blog
Why India Is Emerging as a Third-Party Breach Hotspot
SecurityScorecard experts analyzed why 52.6% of Indian vendors experienced at least one third-party breach in the past year in a recent webinar. India has become one of the most critical engines of the global digital economy and one of the most targeted.
Strike Alert
Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability (CVE-2025-6543) Added to CISA KEV
Learn more in this resource.
Blog
What is a SOC 2 Compliance Checklist?
Use this SOC 2 compliance checklist to prepare for your audit, meet requirements, and maintain continuous compliance. Expert guidance for security leaders.
Blog
What Are Moltbot and Moltbook and What Happens When Agentic AI Assistants Scale Without Security
Moltbot AI assistants and their social media platform Moltbook have sparked AGI fears in recent days, but the real risk is access. Learn what Moltbook and Moltbot are (now OpenClaw and formerly known as Clawdbot), why it’s not artificial general intelligence (AGI), and how to reduce security exposure.
Blog
What Is Network Cloud Security?
Learn what network cloud security is, why traditional approaches fall short, and best practices for protecting your cloud infrastructure from security threats.
Blog
Odyssey 2026 Recap: Building Continuous Supply Chain Resilience in an Era of Persistent Threats
SecurityScorecard’s Odyssey 2026 customer conference in Miami brought CISOs together to examine continuous, threat-informed supply chain security and the shift from periodic assessments to real-time risk operations.
Blog
What Is Cyber Incident Response and Why It Matters
Learn what cyber incident response is, the steps in the incident response lifecycle, and how to build effective incident response teams and playbooks.
STRIKE
The Quiet Siege II
Explore a fictional depiction of a DDoS attack in The Quiet Siege Part II: Life, Interrupted. The scenario described does not represent a real attack, organization, or incident.
STRIKE
The Quiet Siege I
Explore a fictional depiction of a DDoS attack. The scenario described does not represent a real attack, organization, or incident.